CISSP Study Group – Spring 2025
2025-04-01 08:00 - 17:00, 2025-04-08 17:00 - 20:00, 2025-04-15 17:00 - 20:00, 2025-04-22 08:00 - 17:00, 2025-04-29 17:00 - 20:00, 2025-05-06 17:00 - 20:00, 2025-05-13 17:00 - 20:30, 2025-05-20 08:00 - 17:00 (America/New_York) | Norseman Defense Technologies, 10981 Guilford Rd, Annapolis Junction, MD, 20701
Each Tuesday at 5:00 PM – 8:00 PM (EST), February 18, 2025 – May 20, 2025
Norseman Defense Technologies | 10981 Guilford Rd | Annapolis Junction, MD 20701
Why attend?
Gain credibility as a security expert.
Become a more marketable/hirable candidate.
Become/remain contractually compliant (DoD 8570.01 Manual / DoDD 8140)
Improve IT security skills and enhancing productivity.
Save money over “boot camp” style courses.
Our Study Group fosters a learning environment to better absorb and understand the material.
This is much better than the alternative of cram it in and regurgitate it on a test immediately following.
Our approach simply makes the information more useful and easier to interpret!
You can attend each session in-person in Columbia, MD, or attend virtually on line. Your choice.
Meals are included each night for in-person sessions
Bonus: Pass your exam within 6 months; get a free year of ISSA membership on us!
Cost: just $450 (+ EventBrite Fees – approximately $32.02)

To register, click Here.
registration available at: https://issa-centralmd.org
For more information, contact Kevin Newman (v_p_education@centralmarylandc-y5eorcwrmb.live-website.com).

Click Here to download the CISSP Study Group Flyer

Please share with your colleagues and work partners.

ISSA 40th Anniversary Event and 2025 Awards Gala
2025-04-03 - 2025-04-05 | Westin Galleria Dallas
Celebrating 40 Years of Growth & Connection in Dallas 2025

For forty years, ISSA has helped members throughout their careers, learn, grow and connect with their local cybersecurity communities. In 2025, as we emerge through some challenging transitions in recent years, ISSA International excited to celebrate where we have been, where we are and where we are going. Join us as we bring our members and chapters together at this special event!

Celebrate Excellence

Join us at the ISSA Awards Ceremony & Gala celebrating outstanding ISSA members.

Gain Exclusive Insights

Attend the ISSA Conference for valuable insights from industry experts.

Learn From the Best

Discover the secrets of success from chapters worldwide at the Chapter Leaders Meeting.

Supercharge Your Career

Catapult your career, seize fresh opportunities, and thrive in this dynamic industry.

Expand Your Network

Unleash new opportunities as you connect, collaborate, and cultivate relationships

Experience Dallas

Experience the energy and excitement of Dallas while networking at the gala.

BSides Charm Baltimore 2025
2025-04-12 - 2025-04-13 | Sheraton Baltimore North, 903 Dulaney Valley Rd, Towson, MD, 21204, United States
BSidesCharm is a non-profit, regional Security BSides held in Baltimore, MD. It operates under the umbrella principles of Security BSides as a larger community project within information security. BSides aims to offer small, intimate events where all participants can engage each other to help develop connections, friendships, and network with different industry professionals.

We recognize the value in engaging a smaller audience and being the big fish in a small pond. Every organization will have different goals and priorities which is why we offer different levels of participation for every individual, group, or organization. We specifically designed several different options for any sized organization to participate and support this event.

Membership Meeting 4/23/2025
2025-04-23 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Special meeting guests – Carroll Community College Cybersecurity Student Club

Chapter Business Meeting Slides: Membership Meeting 04/23/2025
Speaker Slides: ISSA-April-23-2025-TTP-Presentation.pdf
Topic: .Stakeholder Management in Cybersecurity
Brian Vaughan will host a discussion on the pitfalls and pratfalls that can arise when clients or employer management fail to recognize the importance of proper cyber security processes and procedures. Given the present environment in which we live, this topic remains one of high concern, as it represents a continuous and ongoing problem.

Speaker: Brian Vaughn, Technology Transition Paradigm
Brian Vaughn co-founded and led three IT service companies Dataprise, Shipshape IT and Technology Transition Paradigm A Managed Service Provider and Cyber Security consultancy. Brian also donates time as the President for the Information Technology Foundation (ITF), a non-profit partnership between Montgomery County Public Schools and the local business community. ITF promotes IT education in grades K-12, preparing the next generation of technology professionals.
Brian has a Bachelor of Science degree from the University of Maryland in Political Science and graduated in 1991. He lives in Maryland and has one daughter in college.
Brian enjoys snowboarding, golf, soccer, guitar, basketball, and politics.

Memorial Day
2025-05-26 | MD

Membership Meeting 5/28/2025
2025-05-28 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: Membership Meeting 5/28/2025
Speaker Slides: Thought Leadership
Topic: Data Security: The Missing Context
Join us for this executive session designed specifically for CISOs and cybersecurity leaders seeking a more effective, modern approach to data security. You’ll learn why traditional DLP solutions have consistently underdelivered—failing to protect critical business data and demanding constant manual input. We’ll explore how Concentric AI uses powerful, contextual AI to automatically discover, classify, and secure sensitive information—without relying on rules, regex, or training samples. Through compelling use cases, we’ll demonstrate how semantic understanding of data enables better governance, focused remediation, and smarter protection of business-critical assets like IP, financial data, and strategic plans. Walk away with actionable insights into how context-driven security strategies can reduce risk, simplify compliance, and empower your team to confidently support GenAI adoption across the enterprise. It’s time to rethink data security.

Speaker: Patrick McNaught, Senior Solutions Architect, Concentric AI
Patrick previously worked at other data discovery/classification and DSPM vendors over his 10 years in the data security space. Based in Boston, MA, Patrick brings his security expertise and consultative approach to guide customers through their data security journey.

Juneteenth National Independence Day
2025-06-19 08:00 - 17:00 | MD

Membership Meeting 6/25/2025
2025-06-25 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click HERE to register for the June 25, 2025 Membership Meeting
Chapter Business Meeting Slides: TBD
Speaker Slides: TBD
Topic: The perils of introducing AI at scale for security practitioners

What sneaks in via vendors, what comes in via the supply chain for built app, and issues with monitoring and defending it. I will also cover the issues of declining trust in content and results based on AI recycling its own output.

Speaker: Amélie Koran

Amélie Erin Koran is a seasoned technology and cybersecurity executive with over 25 years of leadership across both public and private sectors, including roles at Walmart Global Technology, Electronic Arts, Splunk, and multiple U.S. federal agencies. She has driven modernization and innovation initiatives across cybersecurity, enterprise architecture, and DevSecOps environments, and has been instrumental in shaping national and international cybersecurity and technology policy. A frequent keynote speaker at major industry events such as USENIX LISA, ShmooCon, InfoSec World, and DEF CON, she was recently a Senior Fellow at the Atlantic Council, where she advises on digital supply chain security and open-source software practices.

Click HERE to register for the June 25, 2025 Membership Meeting
The ISSA Central MD Chapter is unable to support non-US in person registrants this month.

Independence Day
2025-07-04 | MD

Membership Meeting 7/23/2025
2025-07-23 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click HERE to register for the July 23, 2025 Membership Meeting
Chapter Business Meeting Slides: 2025-07-23 Meeting Presentation
Speaker Slides: TBD
Topic: Convergence of Networking and Security
As digital infrastructure becomes increasingly complex and interconnected, the traditional boundaries between networking and security are dissolving. This talk explores the foundational principles of security—defining risk, the core triad of confidentiality, integrity, and availability—and how these principles underpin every secure system. We’ll examine the critical role of identity in modern architectures and trace the historical evolution of networking alongside the reactive development of security controls.
With this context, the session will delve into the challenges of implementing a true Zero Trust model in today’s dynamic environments, where perimeter-based defenses are no longer sufficient. Finally, we’ll explore how the advent of 5G technology exemplifies the convergence of networking and security, enabling orchestration, automation, and policy enforcement at unprecedented scale and speed. Attendees will leave with a deeper understanding of how integrated approaches are shaping the future of secure, resilient networks.

Speaker: David Henning, Global Director Cybersecurity Operations, Hughes Network Systems – An EchoStar Company
David has over 26 years of experience in the Information Security field, 21 of them with Hughes Network Systems. He has worked for major universities, large government agencies, and as a consultant for a variety of corporations. David is currently the Director of the Security Operations Center team at HughesNet. He started out as a firewall and IDS analyst heading up the first IDS ever installed at the USDA. He went on to perform penetration testing, risk assessments, and worked at an MSSP monitoring customer IDS. David earned his CISSP in 2005, GCPM Gold in 2009, PCI ISA in 2015, and GSTRT in 2024. Previously, David has worked for SANS building demonstration networks at security conferences and mentoring CISSP training sessions. At Hughes, David is also responsible for PCI and other compliance efforts. He is looking forward to sharing his experiences ensuring the security of manufacturing systems.
Click HERE to register for the July 23, 2025 Membership Meeting

Membership Meeting 8/27/2025
2025-08-27 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click HERE to register for the August 27, 2025 Membership Meeting
Chapter Business Meeting Slides: 2025-08-27 Meeting Presentation
Speaker Slides: ISSA Central Maryland – Building a Cybersecurity Program from Noting (Aug 27 2025)
Topic: Building a Cyber Security Program from Nothing – First 90 Days
Launching a cybersecurity program from the ground up is one of the most challenging — and rewarding — opportunities in a security professional’s career. In this session, I will guide you through the critical first steps: how to begin with clarity when there’s no existing program, align security with business drivers, and build trust by making security and compliance accessible to all. You’ll leave with actionable insights, key considerations, and a roadmap to help you make a lasting impact in your first 90 days — and set the tone for long-term success.

Speaker: David Brown, Head of Security & Compliance, Andesite AI, Inc. (“Andesite”)
Dave Brown is the Head of Security & Compliance at Andesite AI, leading security, compliance, and IT transformation strategies. Formerly at Qualtrics, he integrated the Clarabridge security program after its $1.12 billion acquisition. At US-CERT, he held leadership roles, including Deputy Director, where he oversaw national cybersecurity initiatives. Dave holds an M.S. in Management and Information Systems Security, has three certifications (QTE, CISM, CISSP), and is President of the ISSA Blue Ridge Chapter. He also authored The Lean CISO: Bootstrapping Cybersecurity in Startups.
Click HERE to register for the August 27, 2025 Membership Meeting

Labor Day
2025-09-01 | MD

Billington CyberSecurity Summit
2025-09-09 - 2025-09-12 | WALTER E. WASHINGTON CONVENTION CENTER, 801 Allen Y. Lew Place, Washington DC, 20001

Rosh Hashannah
2025-09-23 | MD

Membership Meeting 9/24/2025
2025-09-24 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: 2025-09-24 Business Meeting Slides
Speaker Slides: From Firefighting To Strategic Focus: Overcoming Workforce Gaps To Drive IT Performance
Topic: From Firefighting To Strategic Focus: Overcoming Workforce Gaps To Drive IT Performance

As cybersecurity and IT teams face rising threat complexity and a shrinking talent pipeline, many leaders are stuck in reactive mode—undermining trust, adoption, and long-term strategy. Based on insights from a cross-sector study with 14 senior IT and IS leaders, this session reveals three key shifts needed to strengthen internal alignment, accelerate results, and lead effectively through change. Attendees will gain actionable strategies to build influence, adaptability, and team resilience—even with limited resources.
The IT and cybersecurity landscape is under immense pressure—shaped by rapid innovation, rising threat complexity, and a workforce pipeline that’s struggling to keep up. Many teams find themselves in constant firefighting mode, unable to fully leverage the systems, talent, or strategic priorities at their disposal.
In this session, Christine Springer, Founder and CEO of Rising Culture Group, shares insights from a cross-sector study of 14 senior IT and IS leaders—including those leading security, infrastructure, and digital transformation. The findings expose critical yet often overlooked internal risks: eroding trust, lagging tech adoption, and leadership pipelines that aren’t built to meet today’s demands.
Attendees will walk away with:

A 3-part framework to shift out of reactive mode and build long-term strategic capacity
Real-world examples of how technical leaders are developing power skills to drive alignment, influence, and resilience
Practical steps to strengthen team adaptability and internal service—even with a leaner bench

If your team is stretched thin, under pressure, or navigating high-stakes change, this session will offer actionable strategies to lead more effectively in uncertain times.
Speaker: Christine Springer, Founder and CEO of Rising Culture Group
Christine Springer is the Founder of Rising Culture Group and a trusted advisor to leaders seeking to drive results while creating a supportive environment for team growth. With a background in Psychology from the University of Texas and a master’s degree in physical therapy from Texas Woman’s University, Christine has spent her entire career helping people and organizations.
Christine and her team specialize in helping technical leaders migrate from expert contributors to trusted leaders who can inspire buy-in and drive strategic outcomes.
Christine is certified in Everything DiSC and Five Behaviors of a Cohesive Team. She is also a certified coach.

Yom Kippur
2025-10-02 | MD

Native American or Indigenous Peoples' Day
2025-10-13 | MD

Membership Meeting 10/22/2025
2025-10-22 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: 2026-10-22 Business Meeting Slides
Corelight’s Capture the Flag Exercise
Overview
Join us for an immersive lab-based, instructor-led defensive Capture the Flag exercise with Corelight. Participants will dive into one or more real-world scenarios to detect and respond to threats using logs from Suricata and Zeek.
Agenda
● Introduction to Zeek: Brief overview of Zeek and its role in network security. Understanding how to leverage Zeek data for threat detection.
● Hands-on Hunting: Participants will actively engage in a variety of hunting exercises across different protocols. Use your wits to identify and respond to potential threats discovered in Zeek data. Questions are encouraged, but participants have full control at the keyboard.
● Competition and Scoreboard: Participants compete against each other in a friendly competition. Scores will be tracked on a real-time scoreboard.
● Debriefing: Discussion on the attacks witnessed during the exercise. Brief overview of how Corelight can enhance threat detection and response capabilities.
● Corelight Integration: Learn how Corelight can be integrated into your network defense strategy. Understand the added value Corelight brings to Zeek-powered threat detection.
Requirements
Each participant will need their own laptop, a standard web browser, and a connection to the Internet.
Conclusion
At the end of the event, participants will not only have honed their threat detection skills but will also have gained insights into leveraging Suricata and Zeek for effective network defense.

Veterans Day
2025-11-11 | MD

Membership Meeting 11/19/2025
2025-11-19 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: 2025-11-19 Meeting Presentation
Speaker Slides: 2025-11-19 ISSA Practical Applications with Google AI using Gemini for Workspace
Topic: .Practical Applications with Google AI using Gemini for Workspace
In this presentation, AI expert, Kevin A. McGrail dives into AI’s history and its ethical implications for a safer digital future. Discover Google Gemini AI’s powerful Workspace features and applications. Learn to craft effective AI prompts and leverage tools like NotebookLM. Understand data organization for maximizing AI capabilities and mitigating bias. Explore advanced techniques and compliance in AI.

Speaker: Kevin A. McGrail, CEO Emeritus, Peregrine Computer Consultants Corporation
Kevin A. McGrail, aka “KAM”, is the CEO emeritus for PCCC, a Cloud Fellow at DitoWeb.com, and the Chair Emeritus for the Apache SpamAssassin project. He specializes in privacy and security for network, e-mail, and business with decades of experience battling spam, malware, and phishes. As a Cloud Fellow for Dito, he helps organizations migrate and manage their Cloud Cybersecurity. He founded and leads Dito’s Cyber Security practice, awarded Google’s Cloud Security partner of the year in June 2022 and the Google preferred partner for Civilian and DoD Authorities to Operate. He is a Google Developer Expert for AI/ML, Cloud, and Google Workspace as well as a member expert in the U.S. Marine Corps Cyber Auxiliary. KAM enjoys working with Open Source Software and is a proud member of the Apache Software Foundation. He has battled spammers for decades and his research protects hundreds of millions of Internet users every day. In February 2025, he was awarded the Mary Litynski lifetime achievement award for keeping the internet safe from M3AAWG.org. KAM is a Center for Innovative Technology MACH37 Cyber Security Incubator Graduate and a member of the board of advisors for Virtru.com & SecurityUniversity.edu. He is also named a Distinguished Senior Fellow as a thought leader in the field of Cyber Security at Thomas University’s Armed Services Institute in the Center for Military Life. KAM also lives with a rare disease and has been a volunteer Board Member of the DysautonomiaSupport.org as well as an Officer and Board member of POAC-NoVA.org helping other people improve their lives.

Thanksgiving Day
2025-11-27 | MD

Holiday Networking 12/17/2025
2025-12-17 17:00 - 19:30 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click HERE to register for the ISSA Holiday Networking Event

Click HERE to register for the ISSA Holiday Networking Event

Christmas Day
2025-12-25 | MD
